DDS (Ver_09-10-13.01) - FAT32x86
Run by xxx at 18:55:22,79 on 20.10.2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.49.1031.18.2039.1139 [GMT 2:00]
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
FW: COMODO Firewall Pro *disabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
C:\Programme\Videoload Manager\ContentManager.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Programme\UPHClean\uphclean.exe
C:\WINDOWS\system32\igfxtray.exe
C:\Programme\Apacer USB Device\shwicon.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\Ashampoo\Ashampoo FireWall\FireWall.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\GMX\GMX Upload-Manager\DAVSRV.EXE
C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programme\Hama\Hama Wireless LAN Adapter\Installer\WINXP\RaUI.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Programme\Skype\Phone\Skype.exe
C:\Programme\Skype\Plugin Manager\skypePM.exe
C:\Programme\ICQ6.5\ICQ.exe
D:\Programme\Foxmail6\Foxmail.exe
C:\WINDOWS\system32\sol.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Lavasoft\Ad-Aware\AAWService.exe
C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\Explorer.EXE
I:\Programme\XnView\xnview.exe
G:\Downloads\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.xxx.de/login.html
uWindow Title = Windows Internet Explorer bereitgestellt von T-Online.de
uDefault_Page_URL = hxxp://www.t-online.de/cpm-redir/IE-8.html
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = 127.0.0.1
mSearchAssistant =
uURLSearchHooks: Yahoo! Toolbar mit Pop-Up-Blocker: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\programme\gemeinsame dateien\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Download Manager Browser Helper Object: {19c8e43b-07b3-49cb-bffc-6777b593e6f8} - c:\progra~1\gemein~1\fluxdvd\downlo~1\XEBDLH~1.DLL
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: EWPBrowseObject Class: {68f9551e-0411-48e4-9aaf-4bc42a6a46be} - c:\programme\canon\easy-webprint\EWPBrowseLoader.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\programme\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\programme\gemeinsame dateien\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\programme\google\googletoolbarnotifier\5.3.4501.1418\swg.dll
BHO: : {bbe59af5-ee22-4a3a-ab26-3f774d1b4216} - c:\programme\folderbox\FolderBox.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\programme\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\programme\windows live\toolbar\wltcore.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\programme\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\programme\canon\easy-webprint\Toolband.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\programme\windows live\toolbar\wltcore.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [UIWatcher] c:\programme\ashampoo\ashampoo uninstaller platinum 2\UIWatcher.exe
uRun: [SpybotSD TeaTimer] c:\programme\spybot - search & destroy\TeaTimer.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [GMX_GMX Upload-Manager] "c:\programme\gmx\gmx upload-manager\DAVSRV.EXE" /hide
uRun: [swg] "c:\programme\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [ShowIcon_Apacer Technology Inc._Apacer USB Device v1.16e012] "c:\programme\apacer usb device\shwicon.exe" -t"apacer technology inc.\Apacer USB Device v1.16e012"
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [DIManager] e:\hilfsprogramme\dimanager\DIManager.exe /auto
mRun: [Ad-Watch] c:\programme\lavasoft\ad-aware\AAWTray.exe
mRun: [avgnt] "c:\programme\avira\antivir desktop\avgnt.exe" /min
mRun: [Ashampoo FireWall] "c:\programme\ashampoo\ashampoo firewall\FireWall.exe" -TRAY
mRun: [Tweak UI 1.33 deutsch] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
mRun: [SunJavaUpdateSched] "c:\programme\java\jre6\bin\jusched.exe"
mRun: [QuickTime Task] "c:\programme\quicktime\QTTask.exe" -atboottime
mRun: [Adobe Reader Speed Launcher] "c:\programme\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\programme\gemeinsame dateien\adobe\arm\1.0\AdobeARM.exe"
uPolicies-explorer: FoFileAssociate = 0 (0x0)
uPolicies-explorer: HideClock = 0 (0x0)
uPolicies-explorer: NoRecentDocsNetHood = 1 (0x1)
uPolicies-explorer: NoActiveDesktop = 00000000
uPolicies-explorer: NoWindowsUpdate = 0 (0x0)
uPolicies-explorer: NoSMMyDocs = 1 (0x1)
uPolicies-explorer: NoSMMyPictures = 01000000
uPolicies-explorer: NoStartMenuMyMusic = 0 (0x0)
uPolicies-explorer: NoInstrumentation = 0 (0x0)
uPolicies-explorer: NoNetworkConnections = 01000000
mPolicies-explorer: NoWindowsUpdate = 0 (0x0)
mPolicies-explorer: NoSMMyDocs = 1 (0x1)
mPolicies-explorer: NoSMMyPictures = 0 (0x0)
mPolicies-explorer: NoStartMenuMyMusic = 0 (0x0)
mPolicies-explorer: NoRecentDocsNetHood = 0 (0x0)
mPolicies-explorer: NoInstrumentation = 0 (0x0)
mPolicies-explorer: NoStrCmpLogical = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Alte Version auf &archives.org ansehen - c:\dokumente und einstellungen\all users\anwendungsdaten\tuneup software\tuneup utilities\web\tuarch.htm
IE: Mit &Google suchen - c:\dokumente und einstellungen\all users\anwendungsdaten\tuneup software\tuneup utilities\web\gsearch.htm
IE: Nach Microsoft &Excel exportieren
IE: Zoom &In* - c:\dokumente und einstellungen\all users\anwendungsdaten\tuneup software\tuneup utilities\web\tuzoomin.htm
IE: Zoom &Out* - c:\dokumente und einstellungen\all users\anwendungsdaten\tuneup software\tuneup utilities\web\tuzoomout.htm
IE: Zur Filterliste hinzufügen (WebWasher) -
http://-Web.Washer-/ie_add
IE: {B863453A-26C3-4e1f-A54D-A2CD196348E9} - c:\programme\icqlite\ICQLite.exe
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\programme\bluetooth software\btsendto_ie.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {E59EB121-F339-4851-A3BA-FE49C35617C2} - c:\programme\icq6.5\ICQ.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programme\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: c:\programme\ashampoo\ashampoo firewall\spi.dll
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1191087084656
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} - hxxp://static.pe.meinvz.net/photouploader/ImageUploader5.cab?nocache=1215981061
DPF: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} - hxxp://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
TCP: {C0D295A7-BEA0-4210-8E8F-5FD0D9656029} = 208.67.222.222,208.67.220.220
Handler: fluxhttp - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - c:\programme\gemeinsame dateien\fluxdvd\lib\xeb\xebnavigation.ax
Handler: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - c:\programme\gemeinsame dateien\fluxdvd\lib\xeb\xebnavigation.ax
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\gemein~1\skype\SKYPE4~1.DLL
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
================= FIREFOX ===================
FF - ProfilePath - c:\dokume~1\rene\anwend~1\mozilla\firefox\profiles\s8mylw6a.default\
FF - prefs.js: browser.startup.homepage -
FF - component: c:\dokumente und einstellungen\rene\anwendungsdaten\mozilla\firefox\profiles\s8mylw6a.default\extensions\{6ac85730-7d0f-4de0-b3fa-21142dd85326}\platform\winnt\components\ColorZilla.dll
FF - plugin: c:\dokumente und einstellungen\rene\anwendungsdaten\mozilla\firefox\profiles\s8mylw6a.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp071302000004.dll
FF - plugin: c:\programme\gemeinsame dateien\fluxdvd\apix\NPAPIX.dll
FF - plugin: c:\programme\gemeinsame dateien\fluxdvd\browserintegration\NPFluxBrowserHelper.dll
FF - plugin: c:\programme\gemeinsame dateien\mpdrm\NPMPDRM.dll
FF - plugin: c:\programme\gemeinsame dateien\mpdrm\NPWMDRMWrapper.dll
FF - plugin: c:\programme\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\programme\google\update\1.2.141.5\npGoogleOneClick7.dll
FF - plugin: c:\programme\mozilla firefox\plugins\NPAPIX.dll
FF - plugin: c:\programme\mozilla firefox\plugins\NPFluxBrowserHelper.dll
FF - plugin: c:\programme\mozilla firefox\plugins\NPMPDRM.dll
FF - plugin: c:\programme\mozilla firefox\plugins\npracplug.dll
FF - plugin: c:\programme\mozilla firefox\plugins\NPWMDRMWrapper.dll
FF - plugin: c:\programme\windows live\photo gallery\NPWLPG.dll
FF - plugin: d:\programme\opera9\program\plugins\np_gp.dll
FF - plugin: d:\programme\opera9\program\plugins\np32dsw.dll
FF - plugin: d:\programme\opera9\program\plugins\npdsplay.dll
FF - plugin: d:\programme\opera9\program\plugins\npqtplugin.dll
FF - plugin: d:\programme\opera9\program\plugins\npqtplugin2.dll
FF - plugin: d:\programme\opera9\program\plugins\npqtplugin3.dll
FF - plugin: d:\programme\opera9\program\plugins\NPSWF32.dll
FF - plugin: d:\programme\opera9\program\plugins\npwmsdrm.dll
FF - plugin: i:\programme\bildbearbeitung\picasa3\npPicasa3.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\programme\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programme\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programme\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programme\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programme\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
---- FIREFOX POLICIES ----
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300
FF - user.js: browser.blink_allowed - false
FF - user.js: browser.urlbar.autoFill - true
FF - user.js: browser.tabs.tabMinWidth - 100
FF - user.js: browser.xul.error_pages.enabled - true
============= SERVICES / DRIVERS ===============
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-3-13 64160]
R1 uigxrdr;uigxrdr;c:\windows\system32\drivers\uigxrdr.SYS [2008-10-24 149120]
R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\programme\adobe\photoshop elements 7.0\PhotoshopElementsFileAgent.exe [2008-9-16 169312]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\avira\antivir desktop\sched.exe [2009-3-19 108289]
R2 ContentMgrService;Content Management Service;c:\programme\videoload manager\ContentManager.exe [2008-3-12 508928]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\programme\lavasoft\ad-aware\AAWService.exe [2009-1-18 1028432]
R2 SeaPort;SeaPort;c:\programme\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
R2 thomedav;TOFS File System;c:\windows\system32\drivers\thomedav.sys [2009-6-27 83072]
S2 gupdate1c9ca31feb19e12;Google Update Service (gupdate1c9ca31feb19e12);c:\programme\google\update\GoogleUpdate.exe [2009-5-1 133104]
S3 camvid20;Philips ToUcam Camera; Video;c:\windows\system32\drivers\camdrv21.sys [2007-3-11 223232]
S3 cdrmkaun;cdrmkaun;\??\c:\dokume~1\rene\lokale~1\temp\cdrmkaun.sys --> c:\dokume~1\rene\lokale~1\temp\cdrmkaun.sys [?]
S4 0190_0900_Warner_MonitorService;0190/0900 Warner Überwachungsdienst;d:\programme\0190 warner\w0svc.exe --> d:\programme\0190 warner\w0svc.exe [?]
S4 HotSpotFSvc;Hotspot Manager;"c:\programme\gemeinsame dateien\t-com\hotspotmgr\hotspotfsvc.exe" --> c:\programme\gemeinsame dateien\t-com\hotspotmgr\HotSpotFSvc.exe [?]
=============== Created Last 30 ================
2009-10-20 18:30 15,688 a------- c:\windows\system32\lsdelete.exe
2009-10-20 18:30 148 a---h--- C:\aaw7boot.cmd
2009-10-17 11:35 <DIR> --d----- c:\dokume~1\alluse~1\anwend~1\McAfee Security Scan
2009-10-16 22:49 25,992 a------- c:\windows\system32\pgdfgsvc.exe
2009-10-16 16:20 <DIR> --d----- c:\windows\Performance
2009-10-16 16:17 <DIR> --d----- c:\programme\Microsoft Windows 7 Upgrade Advisor
2009-10-16 15:52 266,360 a------- c:\windows\system32\TweakUI.exe
2009-10-16 15:52 160,217 a------- c:\windows\system32\PowerToysLicense.rtf
2009-10-10 22:36 <DIR> --d----- c:\programme\gemeinsame dateien\Apple
==================== Find3M ====================
2009-10-14 19:34 581,846 a------- c:\windows\system32\perfh007.dat
2009-10-14 19:34 104,408 a------- c:\windows\system32\perfc007.dat
2009-09-11 16:17 136,192 a------- c:\windows\system32\msv1_0.dll
2009-09-11 16:17 136,192 -------- c:\windows\system32\dllcache\msv1_0.dll
2009-09-08 16:59 63,860 a---h--- c:\windows\system32\mlfcache.dat
2009-09-04 23:03 58,880 a------- c:\windows\system32\msasn1.dll
2009-09-04 23:03 58,880 -------- c:\windows\system32\dllcache\msasn1.dll
2009-08-28 12:35 173,056 a------- c:\windows\system32\dllcache\ie4uinit.exe
2009-08-26 10:00 247,326 a------- c:\windows\system32\strmdll.dll
2009-08-26 10:00 247,326 a------- c:\windows\system32\dllcache\strmdll.dll
2009-08-20 15:09 1,193,832 a------- c:\windows\system32\FM20.DLL
2009-08-05 10:59 206,336 a------- c:\windows\system32\mswebdvd.dll
2009-08-05 10:59 206,336 -------- c:\windows\system32\dllcache\mswebdvd.dll
2009-08-04 22:56 2,191,488 a------- c:\windows\system32\ntoskrnl.exe
2009-08-04 22:56 2,191,488 -------- c:\windows\system32\dllcache\ntoskrnl.exe
2009-08-04 19:26 2,068,352 a------- c:\windows\system32\ntkrnlpa.exe
2009-08-04 19:26 2,068,352 -------- c:\windows\system32\dllcache\ntkrnlpa.exe
2009-08-04 19:26 2,147,840 -------- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-08-04 19:25 2,026,496 -------- c:\windows\system32\dllcache\ntkrpamp.exe
2009-07-25 05:23 411,368 a------- c:\windows\system32\deploytk.dll
2008-04-17 00:30 32 a------- c:\dokume~1\alluse~1\anwend~1\ezsid.dat
2007-12-21 16:35 46,008 a------- c:\dokume~1\rene\anwend~1\GDIPFONTCACHEV1.DAT
2007-03-27 17:27 774,144 a------- c:\programme\RngInterstitial.dll
2003-03-16 03:00 7,216 a------- c:\windows\inf\RAMDISK.SYS
2006-12-17 21:21 736,768 a--sh--- c:\windows\AKASShf.exe
2009-04-01 13:12 32,768 a--sh--- c:\windows\system32\config\systemprofile\lokale einstellungen\verlauf\history.ie5\mshist012009040120090402\index.dat
============= FINISH: 18:57:08,53 ===============
